6 ms·
Doesn't the MongoDB daemon run in a privilege-free sandboxed environment?
by shin_lao 14y ago
Doesn't the MongoDB daemon run in a privilege-free sandboxed environment?
- mrkurt 14y agoDepends who's running it. :)
- yet 14y agoExactly - and in 90% of the cases MongoDB is run by the company idiot
- ehsanf 14y agoMongoDB manual has some good recommendations on operations here: http://docs.mongodb.org/manual/administration/security/#operations http://docs.mongodb.org/manual/administration/security/#oper... It certainly helps limit the damage. However, unless it is chroot-ed, it will still pose a very serious risk. And even with chroot, the damage is not totally eliminated. The attacker can start leveraging local vulnerabilities.